The MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in its accesscontrol function. This vulnerability enables remote attackers to inject and execute arbitrary OS commands on the affected device, leading to full root access on the underlying system. The vulnerability has a CVSS 4.0 score of 9.3, indicating critical severity with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided, and no known exploits in the wild have been reported.

Successful exploitation allows remote attackers to execute arbitrary commands on the router with root privileges, potentially compromising the entire device and network. This can lead to full system compromise, unauthorized access, and control over the device's functions and data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the device's management interfaces and monitor for suspicious activity related to the accesscontrol function.